CVE-2013-1760 The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities
PublishedThe Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities
Vendor
2 published CVES affecting thebuggenie, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities
The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/svn_integration/config.inc.php and certain other files.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.